News

They took the red pill

French and Dutch police have taken down the Matrix chat app, which was designed by criminals for criminals to be a secure encrypted messaging tool.…

'Where we go is who we are' totally isn't a creepy ad slogan at all

The FTC has reached a settlement with two data brokerages over allegations they harvested precise location data that shows when people entered hospitals, places of worship, and even attended protests supporting the late George Floyd.…

20-year-old info disclosure class bug still pervades security software

It's time to rev up those patch engines after SailPoint disclosed a perfect 10/10 severity vulnerability in its identity and access management (IAM) platform IdentityIQ.…

ENGlobal customers include the Pentagon as well as major oil and gas producers

American energy contractor ENGlobal disclosed that access to its IT systems remains limited following a ransomware infection in late November.…

National cyber emergencies increased threefold this year

The number of security threats in the UK that hit the country's National Cyber Security Centre's (NCSC) maximum severity threshold has tripled compared to the previous 12 months.…

No exaggeration – literally a ton. Plus, 15 co-conspirators also put behind bars

A Russian court has handed a life sentence to the head of the infamous online drugs souk Hydra, and 15 of his co-conspirators will also spend many years behind bars.…

Yet another result of the MOVEit mess

Hundreds of thousands of employees from major corporations including Xerox, Nokia, Koch, Bank of America, Morgan Stanley and others appear to be the latest victims in a massive data breach linked to last year's attacks on file transfer tool MOVEit.…

Tap into the infinite scalability... of pricing

Re:Invent  Amazon Web Services has a new incident response service that combines automation and people to protect customers' AWS accounts - at a hefty price.…

Explore open source strategies to safeguard critical systems and data

Webinar  Linux security is a component that sits at the heart of today's IT landscape.…

The latest in an unusual change of fortune for group once protected by the Kremlin

An alleged former affiliate of the LockBit and Babuk ransomware operations, who also just happens to be one of the most wanted cybercriminals in the US, is now reportedly in handcuffs.…

The politics of cybersecurity are too important to be left to the politicians

Opinion  Here's a front-page headline you won't see these days: CHINA'S SPIES ARE TAPPING OUR PHONES. Not that they're not – they are – but, like the environment, there's so much cybersecurity horror in the media that, yes, of course they are. And?…

Also, script kiddies still a threat, Tornado Cash is back, UK firms lose billions to avoidable attacks, and more

Infosec in brief  Interpol and its financial supporters in the South Korean government are back with another round of anti-cybercrime arrests via the fifth iteration of Operation HAECHI, this time nabbing more than 5,500 people suspected of scamming and seizing hundreds of millions in digital and fiat currencies. …

Crooks say they have stolen sensitive files on managers and players

Italian professional football club Bologna FC is allegedly a recent victim of the RansomHub cybercrime gang, according to the group's dark web postings.…

US agencies blasted 'unforgivable' SQLi flaws earlier this year

Open-source enterprise network and application monitoring provider Zabbix is warning customers of a new critical vulnerability that could lead to full system compromise.…

Second alleged intrusion on English NHS org systems this week

Yet another of the UK's National Health Service (NHS) systems appears to be under attack, with a ransomware gang threatening to leak stolen data it says is from one of England's top children's hospitals.…

A reason to celebrate SANS and its 35 years of cyber security training

Sponsored Post  Cybercrime never sleeps. As threats continue to evolve and attack surfaces become broader and harder to defend, it has never been more important for the good guys to keep their skills sharp and their knowledge up to date.…

Systems are isolated and pulled offline, while scheduled procedures are canceled

The ongoing cybersecurity incident affecting a North West England NHS group has forced sites to fall back on pen-and-paper operations, according to a statement.…

Scumbags play on victims' worst fears in phishing campaign referencing UK Employment Tribunal

A current phishing campaign scares recipients into believing they've been sacked, when in reality they've been hacked – and infected with infostealers and other malware that means a payday for the crooks behind the scam.…

Plus, a brand-new backdoor, GhostSpider, is linked to the cyber spy crew's operations

The reach of the China-linked Salt Typhoon gang extends beyond telecommunications giants in the United States, and its arsenal includes several backdoors – including a brand-new malware dubbed GhostSpider – according to Trend Micro researchers.…

Funny what putting more effort and resources into IT security can do

Attackers - possibly China's Salt Typhoon cyber-espionage crew - compromised an unnamed wireline provider's network and used this access to try to break into T-Mobile US systems multiple times over the past few weeks, according to its Chief Security Officer Jeff Simon. …